This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft File: GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json) Hash identifier: iS1NeRR0jVvvfjrNLCpaVvfRSJ0vQQY16EHy5oYAss8= Subject key identifier: 4D:BA:71:A9:9E:95:8A:43:BF:BC:E5:6F:49:97:A1:6D:11:1B:79:FE Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c Certificate serial: 019BF687CF16C16D3A72235D529A020B573D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 19:00:54 +0000 Manifest this update: Sun 25 Jan 2026 19:00:54 +0000 Manifest next update: Mon 26 Jan 2026 19:00:54 +0000 Files and hashes: 1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: pkPGV/ltrYxqBUi+Gx4ocx6r94fGqw9nFcKzLHY+Iqs=) 2: LiC_HAv2ieS9qZCIroR8UZoFlPI.roa (hash: R+F8lZe1pX4qczdw7OYcz3GuxYj0Q6ggGPfm7H8FjeE=) 3: i1r9TcXNXsbzaMSqfIgjvx7tIUc.roa (hash: KYoEYuLGKlqcsdZuYcCfv5Zk9kbtA+bdbC5coofITqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:cf:16:c1:6d:3a:72:23:5d:52:9a:02:0b:57:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c Validity Not Before: Jan 25 19:00:54 2026 GMT Not After : Jan 26 19:00:54 2026 GMT Subject: CN=4dba71a99e958a43bfbce56f4997a16d111b79fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d6:85:85:cf:b4:03:90:07:10:92:e5:97:9f: a4:33:59:db:ce:ff:8d:3a:54:10:72:0f:b3:a2:89: 49:e8:d2:36:bb:a8:86:ac:c1:c4:f2:59:2a:ab:da: 4c:0f:7e:30:94:e2:76:b1:cf:c6:c0:17:d5:9e:6c: 48:72:13:c1:2f:2b:a8:eb:f4:fc:e9:68:58:6e:98: 45:4b:83:13:16:72:2a:ba:c3:8c:c4:23:db:1c:a0: fc:5b:83:31:a4:f9:63:bb:78:0d:f6:15:15:78:66: 6a:7a:7f:c3:cf:9d:47:2c:68:9f:ff:6a:14:7f:b7: 4b:6d:2e:a3:3a:64:9a:ff:73:3d:6c:31:2a:c7:e2: a0:ec:d0:44:0d:c5:e6:14:2f:0d:ac:8d:63:28:c7: 29:07:f5:af:27:c7:81:57:79:64:35:f2:9e:99:4d: fe:d6:83:d6:f7:17:da:b4:d5:91:5d:76:57:c3:d2: 65:15:0b:10:e0:44:1c:9b:92:78:c6:9f:8c:3d:3d: 0e:05:de:6f:ca:bd:e3:b8:cc:e2:26:69:db:fa:1a: 60:92:20:5b:8f:ae:e8:1a:d7:53:97:4f:02:9f:f6: 9d:f6:c6:5a:bb:c9:ce:90:77:0b:d0:69:8a:48:e2: 1e:04:bf:83:2e:aa:8b:be:49:40:ac:34:8f:fc:a2: d7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BA:71:A9:9E:95:8A:43:BF:BC:E5:6F:49:97:A1:6D:11:1B:79:FE X509v3 Authority Key Identifier: keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:0d:1a:2b:11:db:3a:f7:b5:e2:a0:2c:6b:94:70:48:c6:5d: b3:d9:28:7e:ed:77:67:eb:df:9c:44:87:65:14:47:d1:bd:db: 42:ec:22:14:6c:3c:46:1c:01:a2:ef:90:50:40:88:41:7f:a1: 0d:6b:64:ab:de:27:4f:a2:18:fc:c9:94:f2:89:f6:c7:2d:4a: 58:84:27:d0:b9:60:f9:f6:d5:3b:8a:bc:80:17:5a:07:05:15: ef:7d:6f:7e:82:d8:69:40:b5:41:10:d6:0f:1e:77:5f:cf:be: e3:c7:e4:e3:6c:bf:f2:7a:3c:fb:f7:52:3f:9c:2a:90:c2:1b: 18:00:67:f9:ea:40:66:d7:58:c8:69:4e:4e:d1:17:f2:fd:25: 72:fa:db:04:4c:05:ac:bf:14:fd:91:7e:eb:45:15:c9:8f:17: 45:6e:3a:63:e0:ff:46:22:c8:0b:d1:18:72:2b:5f:3e:1a:86: 3b:c0:75:91:20:9a:9e:a4:69:7d:89:a4:b7:da:f0:73:73:f0: fb:85:95:d8:c8:50:b2:e4:78:1c:c9:9f:94:34:f0:14:7b:ec: ef:61:5a:1c:be:56:7e:d1:2a:b3:73:65:5c:f9:16:50:9f:8b: 06:cb:e3:52:0b:00:5b:d1:e5:05:aa:4d:c5:fc:4b:93:28:bc: 11:b3:1e:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h88WwW06ciNdUpoCC1c9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMTI1MDllNGYyYTczMGUxNjk5MzdkNDA4MzNiYjg5M2Vl N2I5OGMwHhcNMjYwMTI1MTkwMDU0WhcNMjYwMTI2MTkwMDU0WjAzMTEwLwYDVQQD Eyg0ZGJhNzFhOTllOTU4YTQzYmZiY2U1NmY0OTk3YTE2ZDExMWI3OWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtaFhc+0A5AHEJLll5+kM1nbzv+N OlQQcg+zoolJ6NI2u6iGrMHE8lkqq9pMD34wlOJ2sc/GwBfVnmxIchPBLyuo6/T8 6WhYbphFS4MTFnIqusOMxCPbHKD8W4MxpPlju3gN9hUVeGZqen/Dz51HLGif/2oU f7dLbS6jOmSa/3M9bDEqx+Kg7NBEDcXmFC8NrI1jKMcpB/WvJ8eBV3lkNfKemU3+ 1oPW9xfatNWRXXZXw9JlFQsQ4EQcm5J4xp+MPT0OBd5vyr3juMziJmnb+hpgkiBb j67oGtdTl08Cn/ad9sZau8nOkHcL0GmKSOIeBL+DLqqLvklArDSP/KLXiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE26camelYpDv7zlb0mXoW0RG3n+MB8GA1UdIwQY MBaAFBoSUJ5PKnMOFpk31Agzu4k+57mMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMzE3MzEtNWNkMy00NDVlLThjYjMt NDE5NmIwZWFjZDI3LzEvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iMzE3MzEtNWNkMy00NDVlLThjYjMtNDE5NmIwZWFjZDI3 LzEvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMg0aKxHb Ove14qAsa5RwSMZds9kofu13Z+vfnESHZRRH0b3bQuwiFGw8RhwBou+QUECIQX+h DWtkq94nT6IY/MmU8on2xy1KWIQn0Llg+fbVO4q8gBdaBwUV731vfoLYaUC1QRDW Dx53X8++48fk42y/8no8+/dSP5wqkMIbGABn+epAZtdYyGlOTtEX8v0lcvrbBEwF rL8U/ZF+60UVyY8XRW46Y+D/RiLIC9EYcitfPhqGO8B1kSCanqRpfYmkt9rwc3Pw +4WV2MhQsuR4HMmflDTwFHvs72FaHL5WftEqs3NlXPkWUJ+LBsvjUgsAW9HlBapN xfxLkyi8EbMesA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:46:29 2026 by rpki-client